Mindgard discloses unpatched Cursor flaw that runs a planted git.exe on Windows

Mindgard published a vulnerability it first reported in December 2025: on Windows, opening a repository that contains a malicious git.exe in its root makes Cursor run it with no prompt. Mindgard said the issue was still present more than six months and 197 versions later, and recommended opening untrusted repositories only in a VM or sandbox.

Who is affected:

Cursor users on Windows who open repositories they do not trust.

Action needed:

Open untrusted repositories in a VM or Windows Sandbox until Cursor confirms a fix.